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I claim: 



f r ±rr*cm -- Gl - e c L ji icgT^ystem with a plurality of system 
components carrying out the same or mutually corresponding 
actions, an apparatus for monitoring a proper operation of the 
plurality of components of the electrical system, ^comprising: 



a plurality of dedicated monitoring devices ea'ch assigned to a 
respective one of the system components to^se monitored, each 
of said dedicated monitoring devices being operable 
independently of the respective system/component to be 
monitored . 



2. The apparatus according to c^.im|l, wherein said 
monitoring devices are connect^ tio receive monitoring data 
from the respectively associated system component and are 
configured to compare monitoring data received from the 
respectively associated/system component and from other system 
components or from othfer monitoring devices, for determining 
whether or not the Respectively associated system component is 
operating properlW 



3. The apparatus according to claim 2, wherein said 
monitoring devices are configured to examine the monitoring 
data received from the system components and to decide whether 
the monitoi/ing data meet predefined conditions. 
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4. The apparatus according to claim 3, wherein saftd 
monitoring devices are configured to check whethepr the 
monitoring data received from the system components to be 
monitored and/or from the monitoring devices associated 
therewith agree or correspond to one another/ 



5. The apparatus according to claim 3, wherein said 
monitoring devices are configured to check whether the 
monitoring data received from the system components to be 
monitored and/or from the monitoring devices associated 
therewith are in a predetermined ^ratio or a predetermined 



relationship with one another 




6. The apparatus according ^t declaim 3, wherein sai 



monitoring devices are configured to check whether the 

/' 

monitoring data received /f f rom the system components to be 

j 

monitored and/or from the monitoring devices associated 

/ 

therewith are predetermined data. 

,7 
/ 

i! 

/ 
/ 

7. The apparatus according to claim 3, wherein, if a given 

*' 

said monitoring deVice concludes that the monitoring data from 

i 

one of the system components do not meet the predefined 

/ 

condition, the relevant system component is made to stop 
operating . 
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8. The apparatus according to claim 7, wherein saic 
monitoring device is configured to stop an operation of the 
relevant system component. 

9. The apparatus according to claim 8, wherein the system 
components to be monitored are constructed and operated to 
only process a given task when an enable s'ignal is present, 



10. The apparatus according to claim 9, wherein said 
monitoring device is configured to generated the enable signal 



for the respectively associated system component. 




11. The apparatus according to \cl>ai^T 9, wherein the enable 
signal is formed by a logical combination of control signals 
generated and output by the monitoring devices associated with 

/ 

a respective system component depending on whether or not the 
monitoring data output by the system component meet the 
predefined conditions . 



12. The apparatus according to claim 1, wherein the system 
components to be monitored are program-controlled units. 



13. The apparatus according to claim 1, wherein the system 
components to be mon4tored are a constituent part of various 
bus units of a bus system. 
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14. The apparatus according to claim 13, wherein saic 
monitoring devices are a constituent part of commun/cations 
controllers of the bus units, and the communications 

/ 

controllers are configured to transmit data to other bus units 

/ 

via the bus, and to receive data via the bus. 




15. The apparatus according to claim 13 or 14, wherein the 
bus units containing the sys^ef^qomponents to be monitored are 
connected to one another via W/pliirality of buses. 




16. The apparatus according to claim 15, wherein the bus 
units contain a number pf communications controllers 

corresponding to a number of buses connecting the 

/ 

communications controllers to one another, wherein each 

/ 

communications controller is connected to a different bus, 



17. The apparatus according to claim 16, wherein a monitoring 



device is ^ovided^arrr^ach of the communi cagiOTis-eQntxQl 1 er s . 




